Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
File: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft (raw, json)
Hash identifier: S1D8T3ICcjFNmp6g5CcdkVA+bbqE1yAqRpJ1p1FtkF8=
Subject key identifier: AF:AE:D1:93:C8:A0:32:AA:84:F9:38:87:A7:69:E6:DE:3D:0A:49:99
Authority key identifier: E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
Certificate issuer: /CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Certificate serial: 01951210DA4D6BE74BBF2E93F524DE3BE4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
Manifest number: 090B
Signing time: Mon 17 Feb 2025 04:00:49 +0000
Manifest this update: Mon 17 Feb 2025 04:00:49 +0000
Manifest next update: Tue 18 Feb 2025 04:00:49 +0000
Files and hashes: 1: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl (hash: 9QvLaQ6UDctgwqRfpoWjVMsLzep7HEAhVwi0uVMcoPk=)
2: uzOfDn3na_0H4FMYAvULbyI0B6c.roa (hash: uAuwh9KcLGGG4HeIvB3vA//BXxot+F12ayTtv/6riqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:da:4d:6b:e7:4b:bf:2e:93:f5:24:de:3b:e4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Validity
Not Before: Feb 17 04:00:49 2025 GMT
Not After : Feb 18 04:00:49 2025 GMT
Subject: CN=afaed193c8a032aa84f93887a769e6de3d0a4999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:50:cb:a2:5b:06:b1:2d:62:d4:df:5a:5a:
31:bf:7a:3c:8c:5f:4b:43:b7:be:93:b8:78:30:cf:
7c:5f:81:21:94:20:0d:fd:be:0a:2b:c8:de:21:46:
39:b7:da:1e:93:56:d1:c6:04:9a:a8:e2:d8:52:1c:
14:26:82:6c:b5:93:46:52:61:c7:a3:19:d1:8a:34:
23:a1:40:26:11:a6:83:c3:85:b8:9c:f9:61:21:42:
f1:51:a6:6e:56:2f:ce:56:a0:ce:53:76:71:1d:31:
fa:eb:cc:7c:90:10:24:b6:23:9e:3f:6d:a7:bf:5e:
d3:0f:87:9a:cf:fc:41:c1:b0:12:65:cc:0a:ec:88:
05:22:6b:07:79:2e:50:1d:37:8a:0b:12:76:64:4f:
93:49:1f:b0:9f:84:ef:07:e8:ad:07:30:af:29:c9:
84:44:24:37:a0:21:a7:b7:de:6f:03:a8:a5:95:fd:
22:03:7b:78:46:a0:c8:58:4e:c9:ee:f1:43:06:09:
8a:55:36:b3:b1:36:7e:43:61:2d:46:38:4f:3c:50:
91:a2:84:25:98:a1:09:e0:2d:27:b1:ad:72:aa:2a:
f5:75:33:c5:c4:55:37:fa:dd:a1:51:3a:76:48:01:
e3:aa:36:f5:9d:f1:12:a3:5a:0f:5c:2b:63:f0:ec:
1e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AE:D1:93:C8:A0:32:AA:84:F9:38:87:A7:69:E6:DE:3D:0A:49:99
X509v3 Authority Key Identifier:
keyid:E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7d:da:cf:10:6c:80:ac:e6:29:2a:9e:8d:93:a2:c7:66:ea:
a2:44:94:16:43:26:6d:0e:a6:4d:f8:69:f6:dd:c3:5c:a7:0d:
a8:1d:c3:66:09:12:ac:be:df:8f:95:0c:d0:88:b1:bd:77:41:
44:c3:bc:83:0b:ee:fa:bc:e9:da:5b:7d:81:63:fc:d0:41:f4:
71:3a:01:75:29:41:5e:a4:d2:86:bf:59:15:58:1b:79:24:10:
f7:2c:6c:de:f2:3a:2b:d0:13:10:a5:c5:c3:0e:15:f2:05:ef:
26:f0:47:96:4f:fc:41:43:ef:cc:e3:2b:c0:53:f3:24:32:7d:
0a:6f:65:4f:5e:66:4a:b5:25:b4:c2:80:f5:30:20:97:7f:3a:
91:48:e0:15:ce:b8:7b:bc:b5:6c:0a:a0:4d:6c:64:79:5f:44:
6b:a7:d2:24:05:1d:ea:91:ac:a3:a9:9c:95:9d:48:0d:43:3a:
0c:48:0f:ff:14:4d:42:46:28:13:ba:92:0f:55:f4:8e:8f:01:
58:05:31:16:b7:05:25:c0:59:20:f3:ea:7d:70:56:8a:b5:5b:
8f:8f:b0:e9:45:de:e2:67:bb:80:ab:23:94:15:7d:9b:89:19:
48:04:8c:9c:67:86:21:68:ec:e6:ba:b5:1f:9a:de:40:64:68:
a6:6c:2e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:56 2025 by rpki-client